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IN THE CLAIMS 




(currently amended): A method for conducting a transaction over a network, the 
netA^rk including a first system and a second system, the method comprising tjie steps of: 

(a) initiating a transaction session; 

(b) comparing a value of the first system with a value of the/econd system, wherein 
Hie value of the first system is associated with a particular transaction session ; and 

(c) continuing the transaction based on the comparison. 

f 2. (original): The method of claim 1 wherein the Jfrst system comprises a client system 

and the second system comprises a server system. 

3. (original): The method of claim 2 wherein the value of the client system is in a 
persistent client-side data file. 



4. (original): The method of clajm 3 wherein the persistent client-side data file comprises 
a cookie. 

5. (original): The methoel of claim 4 wherein step b) further comprises: 

bl) allowing the server system to compare the value in the cookie with the 
value in the server system. 



6. (original): TTne method of claim 5 wherein if the value in the cookie does not match 
the value in the server system, step c) further comprises: 
c 1 y generating an encryption key; 
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c2) storing a portion of the encryption Key in the cookie; and 
c3) storing the entire encryption key/>n the server system. 




7. (original): The method of claim 6 wherem step c) further comprises: 
c4) allowing the server system/ to transfer encrypted information to the client 

system; and 

c5) allowing the server system to transfer a remaining portion of the 
encryption key to the client system whereby the encryption key is capable of being utilized by the 
client system to decrypt the encrypted information. 

8. (original): The method of clkim 7 wherein step c5) is performed in response to a 
payment transaction from the client System to the server system. 



9. (original): The method of claim 5 wherein if the value in the cookie does match the 
value in the server system, step cjf further comprises: 

cl) allowing /he server system to transfer encrypted information to the client 

system; and 

c2) allowing the server system to transfer a remaining portion of the 
encryption key to the client system whereby the encryption key is capable of being utilized by the 
client system to decrypt the encrypted information. 



10. (original): The method of claim 9 wherein step c2) is performed in response to a 
payment transaction from the client system to the server system. 
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11. (currently amended): A system for conducting a transaction over a network, the 
network including a first system and a second system, the system comprising: 

means for initiating a trar saction; 

means for comparing a vz lue of the first system with a value of the second system^ 
wherein Hie value of the first system is associated with a particular transaction session ; and 
means for continuing the transaction based on the comparison. 

12. (original): The system of claim 1 1 wherein the first system comprises a client system 
and the second system comprises a server system. 

13. (original): The system of plaim 12 wherein the value of the client system is in a 
persistent client-side data file. 



14. (original): The system 
comprises a cookie. 

15. (original): The system 
comprises: 

means for allowing 
value in the server system. 



16. (original): The systenfi 
the value in the server system, tl 



"claim 13 wherein the persistent client-side data file 



of claim 14 wherein the means for comparing further 



the server system to compare the value in the cookie with the 



of claim 1 5 wherein if the value in the cookie does not match 
means for continuing the transaction further comprises: 



means for generating an encryption key; 
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means for storing a portion of the encryption key in the cookie; and 
means for storing the entire encryption key on the serve/ system. 



17. (original): The system of claim 16 wherein the meansobr continuing the transaction 
further comprises: / 

means for allowing the server system to transfer encrypted information to the 
client system; and / 

means for allowing the server system to transfer a remaining portion of the 
encryption key to the client system whereby the encryption key is capable of being utilized by the 
client system to decrypt the encrypted information. 

1 8. (original): The system of claiir/ 1 7 wherein the means for allowing the server system 
to transfer a remaining portion of the encryption key is performed in response to a payment 
transaction from the client system to me server system. 

19. (original): The system of claim 15 wherein if the value in the cookie does match the 
value in the server system, the/means for continuing the transaction further comprises: 

means for allowing the server system to transfer encrypted information to the 
client system; and / 

means for allowing the server system to transfer a remaining portion of the 
encryption key to the client system whereby the encryption key is capable of being utilized by the 
client system to decrypt the encrypted information. 

20. (original): The system of claim 19 wherein the means for allowing the server system 
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to transfer a remaining portion of theWcryption key is performed in response to a payment 
transaction from the client system to the server system. 




21 . (currently amended): A computer readable medium containing program instructions 
for conducting a transaction over a nejtwork, the network including a first system and a second 
system, the program instructions comprising the steps of: 

(a) initiating a transaction; 

(b) comparing a/value of the first system with a value of the second system, 
wherein the value of the first systrfm is associated with a part icular transaction session ; and 

(c) continuing the transaction based on the comparison. 

22. (original): The computer readable medium of claim 21 wherein the first system 
comprises a client system and the second system comprises a server system. 



23. (original): The computer readable medium of claim 22 wherein the value of the client 
system is in a persistent clier t-side data file. 

24. (original): The computer readable medium of claim 23 wherein the persistent client- 
side data file comprises a cc okie. 

25. (original): The computer readable medium of claim 24 wherein step b) further 



comprises: 

bl) alio 
value in the server system 



ving the server system to compare the value in the cookie with the 
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26. (original): The computer readable medium of claim 25 wherein if the value in the 
cookie does not match the value in the server system, step c) further comprises: 

c 1 ) generating an encryption key; 

c2) storing a portion of the encryption key in the cookie; and 

c3) storing the entire encryption key on the server system. 

/ 27. (original): The computer readable medium of claim 26 wherein step c) further 

comprises: 

c4) allowing the servef system to transfer encrypted information to the client 



\ system; and 



c5) allowing the servjbr system to transfer a remaining portion of the 
y encryption key to the client system whereby the encryption key is capable of being utilized by the 
client system to decrypt the encrypted information. 

28. (original): The computer readable medium of claim 27 wherein step c5) is performed 
in response to a payment transaction jfrom the client system to the server system. 

29. (original): The computer readable medium of claim 25 wherein if the value in the 
cookie does match the value in the server system, step c) further comprises: 

cl) allowing the/server system to transfer encrypted information to the client 

system; and 

c2) allowing thd server system to transfer a remaining portion of the 
encryption key to the client system whereby the encryption key is capable of being utilized by the 
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client system to decrypt the encrypted information. 



30. (original): The computer readable medium of claim 29 wherein step c2) is performed 
k in response to a payment transaction from the client system to the server system. 




